Two people hand in the same document. One of them thought about it. The other agreed with it. Every record of those two pieces of work is identical, and no inspection anybody currently runs can tell them apart. That is the subject here, and it is why most AI rules are pointed at the wrong thing.
There is more language in the world than anyone can attend to. The obvious fix, an AI that reads it all for you and tells you what is true, does not work: the judgement that would take requires having been wrong at your own expense, and nothing a model does costs it anything. So the judging stays with people, and almost nothing we currently inspect can tell whether a person actually judged or simply agreed.
Six short pieces, each drawn from a working paper. Each one stands on its own; this is the fourth. They are ordered so that every piece ends by raising the question the next one is called. The full map is in Six Questions, In Order.
Two loan officers get the same mortgage application. The system returns the same recommendation for both: risk tier B plus, approve at a quarter point over prime.
The first officer reads it, notices a gap in the applicant's employment history that the model has weighted lightly, and telephones the applicant to ask about it. Satisfied, she approves. The second reads the recommendation and approves.
Now imagine inspecting those two decisions, with every power a regulator currently has. You can read the file. You can test the model for bias. You can check that the applicant was given reasons. You can review the approval.
All of it is identical. The thing that differed happened in somebody's head and on a telephone, and it is not in the record. Not because anybody hid it. Because there is no field for it.
Most rules ask whether AI was used, and require it to be disclosed. That is the wrong question, because both officers used it.
Same tool, same document, opposite use. That is the variable that matters, and it is invisible in everything we currently inspect.
A final-year engineering project. The analysis package reported that the structure would stand, with the confident internal consistency such packages have.
The software was not broken. It answered exactly the question it was given, and it had no way to know the question was wrong. Everything downstream of that answer was fluent, consistent and false.
The only thing standing between that output and a bad structure was somebody who still knew roughly what the answer ought to look like.
There is a name for the gap between what you signed your name to and what you would have signed had you done the work yourself. Call it the debt.
A companion piece, Why Can't You Just Be Told?, argues that judgement is built by being wrong at your own expense. What follows here is the same erosion seen from the other end: what happens to a profession when the occasions for being wrong quietly stop arriving.
Two researchers are asked to review the same paper. Both start from an AI-drafted review. The first adds a question about a competing method the draft ignored, and deletes a question that misread the notation. The second improves the tone and submits.
One review is nothing. A reviewer does perhaps twelve a year, which is a hundred and twenty in a decade. Somewhere in that hundred and twenty, the second reviewer stopped being able to do what the first one did, and no particular review was the one where it happened.
None of this is a failure of character. It is a property of fluent writing.
Text that is well organised, confident and internally consistent reads as competent, and reading as competent is enough to stop most people looking harder. The 1993 structural analysis had exactly that quality. So does almost everything a model produces now, and it produces it in quantity, at speed, on demand.
Checking is slow and disagreeable. Agreeing is fast and feels like work. The incentive runs the wrong way every single time.
And from the outside, the two look the same. The second reviewer did change the document. There is a tracked edit. There is evidence of engagement.
Any requirement to "review AI output before use" is satisfied completely by changing three adjectives. This is the trap waiting for every framework that asks for engagement without asking what the engagement produced.
Take lending, which is among the most heavily regulated decisions anybody makes with a model. There are rules requiring the applicant be told why. Rules against discriminatory outcomes. Rules requiring that models be validated, documented and monitored. Rights of appeal.
These are real protections and they work on what they are aimed at. Every one of them is aimed at the artifact: the model, the decision, the paperwork, the outcome.
There is a structural precedent and it needs stating carefully, because the substance is not the same.
In the years before 2008, a great deal of risk accumulated in a place the inspection regime of the day did not reach. The substance there was different: corrupted incentives, loans written with no documentation, ratings that did not describe what they rated. None of that is what is being alleged here.
What is shared is only the shape: something real building up underneath the layer everybody is watching, invisible in every report, until it is large enough to show up as an outcome nobody can trace to a decision.
Hospitals have had decision support for decades, and with it a long record of what happens to a safeguard people stop attending to.
A warning that is overridden nine times in ten has stopped being a safeguard and become a formality. Nothing in any record marks the day it changed, and the compliance report still says the alert is in place.
If the variable is whether the person thought, then rules have to act on the conditions for thinking rather than on the paperwork that comes out.
None of this is abstract, and it is worth seeing in three different trades.
Notice what these have in common. None of them inspects the output. All of them change what finishing the work requires.
This is not a proposal for a new regulator. Each of the four has somewhere to attach in doctrine that is already there.
Any requirement becomes a target, and the paper names the three failures in advance rather than waiting to be told about them.
Gaming any of these still leaves the debt exactly where it was. That is the one consolation, and it is a thin one.
Everything in this part rests on somebody senior doing the cultivating: setting the standard, showing a junior what interrogation looks like, naming the number that smells wrong.
The people best placed to do that are the people who have worked alongside these tools the longest, which means they are carrying more of the debt than anyone they would be teaching.
The paper concedes this and does not solve it. It is the hardest problem in the framework and it is the author's own: he has been working this way for years and has no way to audit what it has cost him that does not rely on the very judgement in question.
Short versions tend to overstate. Here is what this one is not saying.
Most organisations have now issued something close to this: disclose when you have used AI, and review the output before you rely on it. It sounds reasonable. Hold it against the three questions.
That is not a bad rule. It is a rule aimed at the artifact, in a problem that lives somewhere else.
The argument here is the one made in a working paper called AI Governance and the Architecture of Practice. What the paper adds is the cases, the sources and the objections, including the ones that have not been answered.
It is part of a series on what judgement is, why it has to be carried by people who bear the consequences of being wrong, and what that means for building with machines that bear none.